Amazon Linux 2023 : mariadb118, mariadb118-backup, mariadb118-client-utils (ALAS2023-2026-3287)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3287 advisory. MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account...

Amazon Linux 2023 : mariadb123, mariadb123-backup, mariadb123-client-utils (ALAS2023-2026-3286)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2026-3286 advisory. MariaDB server is a community developed fork of MySQL server. From 10.6.1 until 10.6.28, 10.11.19, 11.4.13, 11.8.9, 12.3.3, and 13.0.2, MariaDB RPM packages created the dedicated mysql service account...

PT-2026-122977

ProjectSend 2.0.0 through 2.7.1 contains an incomplete authorization vulnerability in FileVersions::link that allows staff users to share files without authorization by linking file versions. Attackers can link their file onto an intermediate revision or assign out-of-scope clients, causing...

Amazon Linux 2 : docker (ALASECS-2026-148)

The version of docker installed on the remote host is prior to 25.0.18-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-148 advisory. The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers...

Amazon Linux 2023 : docker (ALAS2023-2026-3266)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-3266 advisory. The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. A...

Joomla Novarain Framework 6.0.37 Arbitrary File Upload

Joomla Tassos/Novarain Framework versions 4.10.14 through 6.0.37 contain an improper access control issue in the comajax endpoint. The proof of concept uses the nrinlinefileupload gadget to upload files. https://packetstorm.news/download/237459...

php-5.4-cve-2026-php2shell-patch

php-5.4-cve-2026-php2shell-patch Patch for old php 5.4.23 version from CVE-2026-109618 и CVE-2026-109619 vulnerabilities OOM Vulnerability Mitigation This repository contains a custom .patch file for PHP 5.4.23 to fix the critical PHP2Shell Out-of-Memory OOM vulnerability CVE-2026-109618 /...

rip_raw

Rip Raw Rip Raw is a small tool to analyse the memory of compromised Linux systems. It is similar in purpose to Bulk Extractor, but particularly focused on extracting system Logs from memory dumps from Linux systems. This enables you to analyse systems without needing to generate a profile. This ...

GHSA-jpc4-w9r8-43j3

GHSA-jpc4-w9r8-43j3 — Statamic unauthorized arbitrary-extensio...

Modules

Modules Modules used by the Havoc Framework. Powerpick Powerpick implementation for the Havoc Framework. InvokeAssembly InvokeAssembly implementation for the Havoc Framework. Template This is the base template for the modules. You can use this to write your own modules for the Havoc Framework...

CVE-2026-53571

CVE-2026-53571 CVE-2026-53571 server.fs.deny bypass on Windows alternate paths PoC. The contents of files that are specified by server.fs.deny can be returned to the browser on Windows. mkdir CVE-2026-53571 cd CVE-2026-53571 npm init -y npm install [email protected] Verification： python3...

CVE-2026-115932

When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it does not check that the file lies inside the upload directory. A registered user can store a crafted media path with a post, get it past the checks that normally restrict it, and...

CVE-2026-115932 Path traversal in post media lets any registered user read server files

When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it does not check that the file lies inside the upload directory. A registered user can store a crafted media path with a post, get it past the checks that normally restrict it, and...

CVE-2026-115932 Path traversal in post media lets any registered user read server files

When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it does not check that the file lies inside the upload directory. A registered user can store a crafted media path with a post, get it past the checks that normally restrict it, and...

CVE-2026-115932

The Postiz application is vulnerable to a path traversal vulnerability when a user publishes a post. The system fails to verify that media paths not pointing to web addresses remain within the designated upload directory. A registered user (or a self-registered account) can provide a crafted path...

EUVD-2026-109293

When a post is published, Postiz treats a media path that is not a web address as a file on the server's disk, but it does not check that the file lies inside the upload directory. A registered user can store a crafted media path with a post, get it past the checks that normally restrict it, and...

CVE-2026-116020 BookStack before 26.09.2 Incorrect Authorization via AttachmentController on Draft Pages

BookStack before 26.09.2 contains an incorrect authorization vulnerability in AttachmentController that allows authenticated users to access other users' draft page attachments by ID. Attackers with attachment permissions can enumerate sequential attachment IDs to download, rename, relink, or...

CVE-2026-116020

BookStack versions prior to 26.09.2 are vulnerable to an incorrect authorization flaw in the AttachmentController . This vulnerability allows authenticated users to access attachments belonging to other users' unpublished draft pages by identifying sequential attachment IDs. Attackers with suffic...

EUVD-2026-109267

Camaleon CMS before 2.9.3 contains a path traversal vulnerability that allows users with only the media permission to write arbitrary files by supplying ../ sequences in the name parameter. Attackers can send a base64 data: URI to the cropurl media action to write an ERB template into a theme's...

Heroinn

Heroinn A cross platform C2/post-exploitation framework implementation by Rust. This project is for research and study purposes only, and any illegal behavior using this project has nothing to do with this project. Features GUI Interactive PTY shell System infomations collect File manager support...